secure.questdiagnostics.com
- Quest Diagnostics Incorporated -
Issued by DigiCert TLS RSA SHA256 2020 CA1
About this certificate
This digital certificate with serial number 03:5c:28:67:07:22:76:26:5d:6b:79:75:d8:fe:c5:27 was issued on by DigiCert Inc.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Quest Diagnostics Incorporated
Organization:
Quest Diagnostics Incorporated
State / Province:
New Jersey
Locality: Lyndhurst
Country: US
Locality: Lyndhurst
Country: US
DigiCert Inc
Organization:
DigiCert Inc
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:5c:28:67:07:22:76:26:5d:6b:79:75:d8:fe:c5:27Serial Number (int): 4466194757432893290149130775413310759
Serial Number lenght: 122 bits, 16 octets
SubjectKeyId: 32:a1:4d:ae:b7:18:f0:e5:21:dc:8c:2c:2f:9d:fb:b2:9e:c0:49:41
AuthorityKeyId: b7:6b:a2:ea:a8:aa:84:8c:79:ea:b4:da:0f:98:b2:c5:95:76:b9:f4
Fingerprint (sha1): d8:a6:9e:f2:89:95:a6:52:a1:39:81:ed:ec:e4:28:68:75:17:63:f6
Fingerprint (sha256): 03:96:0d:2b:c0:1b:30:8c:30:b3:62:84:da:08:a0:50:19:40:91:a9:83:2a:3d:38:48:4d:fa:f4:87:b4:90:30
Issuing Certificate URL: http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt
Revocation information
OCSP Server: http://ocsp.digicert.comCRL Distribution Point: http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl
Check the revocation status for certificate secure.questdiagnostics.com
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for secure.questdiagnostics.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
secure.questdiagnostics.com
www.secure.questdiagnostics.com
www.secure.questdiagnostics.com
Other certificates including the domain name questdiagnostics.com
(limited to 100 certificates)
secure.questdiagnostics.com
m.questdiagnostics.com
adconnect1.questdiagnostics.com
healthplans.questdiagnostics.com
hs.ess.questdiagnostics.com
qcs.questdiagnostics.com
cas2.questdiagnostics.com
*.questdiagnostics.com
*.mq.questdiagnostics.com
cas2.questdiagnostics.com
einvoice.questdiagnostics.com
neontest.questdiagnostics.com
myvdi01.questdiagnostics.com
qcs.questdiagnostics.com
secure.questdiagnostics.com
akamaisecure8.qualtrics.com
careers.questdiagnostics.com
smm.ess.questdiagnostics.com
tableauprd.qdx.com
*.wellness.questdiagnostics.com
eresults.questdiagnostics.com
ir.questdiagnostics.com
target.questdiagnostics.com
access1.questdiagnostics.com
ds.cdn.questdiagnostics.com
map.questdiagnostics.com
guestwireless.questdiagnostics.com
ucan-dr.questdiagnostics.com
users.care360in.questdiagnostics.com
myquestservices.questdiagnostics.com
akamaisecure8.qualtrics.com
san-12-s12.tlsprovisioning.exacttarget.com
cas2.questdiagnostics.com
hcpenroll.questdiagnostics.com
*.questdiagnostics.com
quanumblog.questdiagnostics.com
healthplans.questdiagnostics.com
mail04.questdiagnostics.com
lisdirect.questdiagnostics.com
ebilling.questdiagnostics.com
secure.questdiagnostics.com
hcp.questdiagnostics.com
*.questdiagnostics.com
report.questdiagnostics.com
iopdesktop.questdiagnostics.com
myquest2.questdiagnostics.com
cas2.questdiagnostics.com
ons-api.questdiagnostics.com
myquest.questdiagnostics.com
ucannp.questdiagnostics.com
eresults.questdiagnostics.com
evpn.questdiagnostics.com
cas2.questdiagnostics.com
map.questdiagnostics.com
texas.questdiagnostics.com
services.questdiagnostics.com
cas2.questdiagnostics.com
cas2.questdiagnostics.com
cas2.questdiagnostics.com
akamaisecure8.qualtrics.com
mail.questdiagnostics.com
cas2.questdiagnostics.com
qdcpool1wsext.questdiagnostics.com
eresultspr.questdiagnostics.com
cas2.questdiagnostics.com
image.email.jands.com.au
myapps.questdiagnostics.com
cas2.questdiagnostics.com
m.questdiagnostics.com
cas2.questdiagnostics.com
services.questdiagnostics.com
brandlab.questdiagnostics.com
reports.questdiagnostics.com
newsecure.questdiagnostics.com
questdiagnostics.com
*.qa.outofpocketestimate.questdiagnostics.com
pscvpn.questdiagnostics.com
questtexaspsc.com
federation.questdiagnostics.com
ssl-vpn14.questdiagnostics.com
ccm.questdiagnostics.com
image.email.jands.com.au
ds.cdn.questdiagnostics.com
evpn.questdiagnostics.com
www.questdiagnostics.com
cedi.questdiagnostics.com
api.questdiagnostics.com
intellitestmanager.questdiagnostics.com
*.questdiagnostics.com
activate.questdiagnostics.com
ons-api-qa.questdiagnostics.com
quest.beam3.monigle.net
ccm.questdiagnostics.com
ebilling.questdiagnostics.com
qcs-uat.questdiagnostics.com
*.hs.ess.questdiagnostics.com
qeag-qa.questdiagnostics.com
ons-dev.questdiagnostics.com
cas2.questdiagnostics.com
internalcareers.questdiagnostics.com
m.questdiagnostics.com
adconnect1.questdiagnostics.com
healthplans.questdiagnostics.com
hs.ess.questdiagnostics.com
qcs.questdiagnostics.com
cas2.questdiagnostics.com
*.questdiagnostics.com
*.mq.questdiagnostics.com
cas2.questdiagnostics.com
einvoice.questdiagnostics.com
neontest.questdiagnostics.com
myvdi01.questdiagnostics.com
qcs.questdiagnostics.com
secure.questdiagnostics.com
akamaisecure8.qualtrics.com
careers.questdiagnostics.com
smm.ess.questdiagnostics.com
tableauprd.qdx.com
*.wellness.questdiagnostics.com
eresults.questdiagnostics.com
ir.questdiagnostics.com
target.questdiagnostics.com
access1.questdiagnostics.com
ds.cdn.questdiagnostics.com
map.questdiagnostics.com
guestwireless.questdiagnostics.com
ucan-dr.questdiagnostics.com
users.care360in.questdiagnostics.com
myquestservices.questdiagnostics.com
akamaisecure8.qualtrics.com
san-12-s12.tlsprovisioning.exacttarget.com
cas2.questdiagnostics.com
hcpenroll.questdiagnostics.com
*.questdiagnostics.com
quanumblog.questdiagnostics.com
healthplans.questdiagnostics.com
mail04.questdiagnostics.com
lisdirect.questdiagnostics.com
ebilling.questdiagnostics.com
secure.questdiagnostics.com
hcp.questdiagnostics.com
*.questdiagnostics.com
report.questdiagnostics.com
iopdesktop.questdiagnostics.com
myquest2.questdiagnostics.com
cas2.questdiagnostics.com
ons-api.questdiagnostics.com
myquest.questdiagnostics.com
ucannp.questdiagnostics.com
eresults.questdiagnostics.com
evpn.questdiagnostics.com
cas2.questdiagnostics.com
map.questdiagnostics.com
texas.questdiagnostics.com
services.questdiagnostics.com
cas2.questdiagnostics.com
cas2.questdiagnostics.com
cas2.questdiagnostics.com
akamaisecure8.qualtrics.com
mail.questdiagnostics.com
cas2.questdiagnostics.com
qdcpool1wsext.questdiagnostics.com
eresultspr.questdiagnostics.com
cas2.questdiagnostics.com
image.email.jands.com.au
myapps.questdiagnostics.com
cas2.questdiagnostics.com
m.questdiagnostics.com
cas2.questdiagnostics.com
services.questdiagnostics.com
brandlab.questdiagnostics.com
reports.questdiagnostics.com
newsecure.questdiagnostics.com
questdiagnostics.com
*.qa.outofpocketestimate.questdiagnostics.com
pscvpn.questdiagnostics.com
questtexaspsc.com
federation.questdiagnostics.com
ssl-vpn14.questdiagnostics.com
ccm.questdiagnostics.com
image.email.jands.com.au
ds.cdn.questdiagnostics.com
evpn.questdiagnostics.com
www.questdiagnostics.com
cedi.questdiagnostics.com
api.questdiagnostics.com
intellitestmanager.questdiagnostics.com
*.questdiagnostics.com
activate.questdiagnostics.com
ons-api-qa.questdiagnostics.com
quest.beam3.monigle.net
ccm.questdiagnostics.com
ebilling.questdiagnostics.com
qcs-uat.questdiagnostics.com
*.hs.ess.questdiagnostics.com
qeag-qa.questdiagnostics.com
ons-dev.questdiagnostics.com
cas2.questdiagnostics.com
internalcareers.questdiagnostics.com
Certificate
The complete raw certificate details for secure.questdiagnostics.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFkDCCBHigAwIBAgIQA1woZwcidiZda3l12P7FJzANBgkqhkiG9w0BAQsFADBP MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMSkwJwYDVQQDEyBE aWdpQ2VydCBUTFMgUlNBIFNIQTI1NiAyMDIwIENBMTAeFw0yMjA1MjUwMDAwMDBa Fw0yMzA2MTQyMzU5NTlaMIGFMQswCQYDVQQGEwJVUzETMBEGA1UECBMKTmV3IEpl cnNleTESMBAGA1UEBxMJTHluZGh1cnN0MScwJQYDVQQKEx5RdWVzdCBEaWFnbm9z dGljcyBJbmNvcnBvcmF0ZWQxJDAiBgNVBAMTG3NlY3VyZS5xdWVzdGRpYWdub3N0 aWNzLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKKgkEZEPRcc EHLfdol50j3UGzwkfd1U2rw50ajGxzlzE+5k3zHZbuimx5UeXrbr9KxKc48ub7vI bIX86pZBLkLfguK2BpP9WYgbiFjcnEVpkz7TlPNifrSS4TJYJ4i4c9idoJZA5e9e kx+3MiuEv5f4YQb/HaoT/ZoZz9Gp+DAxJ4rinNgGfj8UEZzyrVsuVyPQdFPk5Ta6 hnLbfRkSnh2LZpVZTQY+ePtJRlEnXKP8PratLdt1uGjkrNMBLKM5d9NwwrA/wnaE Y+5kgi3bFekV1V9z9b2qgr7TK3ohYH48igakNazbHwmGwxEr/ivN1+Bed+rnbxDv qhOcCPng87cCAwEAAaOCAi8wggIrMB8GA1UdIwQYMBaAFLdrouqoqoSMeeq02g+Y ssWVdrn0MB0GA1UdDgQWBBQyoU2utxjw5SHcjCwvnfuynsBJQTBHBgNVHREEQDA+ ghtzZWN1cmUucXVlc3RkaWFnbm9zdGljcy5jb22CH3d3dy5zZWN1cmUucXVlc3Rk aWFnbm9zdGljcy5jb20wDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUF BwMBBggrBgEFBQcDAjCBjwYDVR0fBIGHMIGEMECgPqA8hjpodHRwOi8vY3JsMy5k aWdpY2VydC5jb20vRGlnaUNlcnRUTFNSU0FTSEEyNTYyMDIwQ0ExLTQuY3JsMECg PqA8hjpodHRwOi8vY3JsNC5kaWdpY2VydC5jb20vRGlnaUNlcnRUTFNSU0FTSEEy NTYyMDIwQ0ExLTQuY3JsMD4GA1UdIAQ3MDUwMwYGZ4EMAQICMCkwJwYIKwYBBQUH AgEWG2h0dHA6Ly93d3cuZGlnaWNlcnQuY29tL0NQUzB/BggrBgEFBQcBAQRzMHEw JAYIKwYBBQUHMAGGGGh0dHA6Ly9vY3NwLmRpZ2ljZXJ0LmNvbTBJBggrBgEFBQcw AoY9aHR0cDovL2NhY2VydHMuZGlnaWNlcnQuY29tL0RpZ2lDZXJ0VExTUlNBU0hB MjU2MjAyMENBMS0xLmNydDAJBgNVHRMEAjAAMBMGCisGAQQB1nkCBAMBAf8EAgUA MA0GCSqGSIb3DQEBCwUAA4IBAQAKc+Y/AEU/6moWUj3YrU7HFvth3eOtuL0fl+jh 7lItvfgBhEnAQKuWSDUl+6vKTMzMDQWg3wLDvbRomNyYCC4OPjhHfumvs0XKb0vS 8BIKSsY2r96URgH5z00NVXgnuneefUUNgPJ3JibEB2IImN1aVGi+t8gShOHqnbAO 97AO/fdNvrXN18GKIWHwISU9I7c8vsPJHaiNej2ykwpPJHCimvURDkQRaUN9hMft J3Xj66AW2Ky3/NdUvZJkSIQjwsM+LBy8XRaUbzHEpe+4i8P0mleGG/I3zJSActHo CbCS8SUaC2QQOtEdRdAZSB3y7kEIbctshF9U/kcs2lXwJ1Xr -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoqCQRkQ9FxwQct92iXnS PdQbPCR93VTavDnRqMbHOXMT7mTfMdlu6KbHlR5etuv0rEpzjy5vu8hshfzqlkEu Qt+C4rYGk/1ZiBuIWNycRWmTPtOU82J+tJLhMlgniLhz2J2glkDl716TH7cyK4S/ l/hhBv8dqhP9mhnP0an4MDEniuKc2AZ+PxQRnPKtWy5XI9B0U+TlNrqGctt9GRKe HYtmlVlNBj54+0lGUSdco/w+tq0t23W4aOSs0wEsozl303DCsD/CdoRj7mSCLdsV 6RXVX3P1vaqCvtMreiFgfjyKBqQ1rNsfCYbDESv+K83X4F536udvEO+qE5wI+eDz twIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 4466194757432893290149130775413310759 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert TLS RSA SHA256 2020 CA1' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-05-25 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-06-14 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New Jersey' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Lyndhurst' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Quest Diagnostics Incorporated' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'secure.questdiagnostics.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20529782252906276228235961696271389785465528420701331160678376392579376940128573129665599300749505163640144706995586009117632287625144729397762551268126545173228836554339129375455070734544937221094738950126869580333960401868106893781047298359777518499474940887281276807636573105204554234104196661870265753998492646181129365366563092689164552976222759941263928519366754412761582511285664275663639585149271950766495145960764257325188706144567015046352687127215406902523897179352609141239119849891776795149120447532985591539262306810592504597177219055416574007735434205748415235444457338126750863935783377358210159670199 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b76ba2eaa8aa848c79eab4da0f98b2c59576b9f4 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 32a14daeb718f0e521dc8c2c2f9dfbb29ec04941 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (64 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.questdiagnostics.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.secure.questdiagnostics.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (135 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (115 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 000a73e63f00453fea6a16523dd8ad4ec716fb61dde3adb8bd1f97e8e1ee522dbdf8018449c040ab96483525fbabca4ccccc0d05a0df02c3bdb46898dc98082e0e3e38477ee9afb345ca6f4bd2f0120a4ac636afde944601f9cf4d0d557827ba779e7d450d80f2772626c407620898dd5a5468beb7c81284e1ea9db00ef7b00efdf74dbeb5cdd7c18a2161f021253d23b73cbec3c91da88d7a3db2930a4f2470a29af5110e441169437d84c7ed2775e3eba016d8acb7fcd754bd9264488423c2c33e2c1cbc5d16946f31c4a5efb88bc3f49a57861bf237cc948072d1e809b092f1251a0b64103ad11d45d019481df2ee41086dcb6c845f54fe472cda55f02755eb